diff options
Diffstat (limited to 'tapset/LKET/hookid_defs.stp')
| -rwxr-xr-x | tapset/LKET/hookid_defs.stp | 402 |
1 files changed, 399 insertions, 3 deletions
diff --git a/tapset/LKET/hookid_defs.stp b/tapset/LKET/hookid_defs.stp index d3c09db7..71684425 100755 --- a/tapset/LKET/hookid_defs.stp +++ b/tapset/LKET/hookid_defs.stp @@ -135,8 +135,175 @@ global /* CPU Frequency */ GROUP_CPUFREQ, - HOOKID_SWITCH_CPUFREQ - + HOOKID_SWITCH_CPUFREQ, + + /*NFS*/ + GROUP_NFS, + + HOOKID_NFS_FOP_LLSEEK_ENTRY, + HOOKID_NFS_FOP_LLSEEK_RETURN, + + HOOKID_NFS_FOP_READ_ENTRY, + HOOKID_NFS_FOP_READ_RETURN, + + HOOKID_NFS_FOP_WRITE_ENTRY, + HOOKID_NFS_FOP_WRITE_RETURN, + + HOOKID_NFS_FOP_AIOREAD_ENTRY, + HOOKID_NFS_FOP_AIOREAD_RETURN, + + HOOKID_NFS_FOP_AIOWRITE_ENTRY, + HOOKID_NFS_FOP_AIOWRITE_RETURN, + + HOOKID_NFS_FOP_MMAP_ENTRY, + HOOKID_NFS_FOP_MMAP_RETURN, + + HOOKID_NFS_FOP_OPEN_ENTRY, + HOOKID_NFS_FOP_OPEN_RETURN, + + HOOKID_NFS_FOP_FLUSH_ENTRY, + HOOKID_NFS_FOP_FLUSH_RETURN, + + HOOKID_NFS_FOP_RELEASE_ENTRY, + HOOKID_NFS_FOP_RELEASE_RETURN, + + HOOKID_NFS_FOP_FSYNC_ENTRY, + HOOKID_NFS_FOP_FSYNC_RETURN, + + HOOKID_NFS_FOP_LOCK_ENTRY, + HOOKID_NFS_FOP_LOCK_RETURN, + + HOOKID_NFS_FOP_SENDFILE_ENTRY, + HOOKID_NFS_FOP_SENDFILE_RETURN, + + HOOKID_NFS_FOP_CHECKFLAGS_ENTRY, + HOOKID_NFS_FOP_CHECKFLAGS_RETURN, + + HOOKID_NFS_AOP_READPAGE_ENTRY, + HOOKID_NFS_AOP_READPAGE_RETURN, + + HOOKID_NFS_AOP_READPAGES_ENTRY, + HOOKID_NFS_AOP_READPAGES_RETURN, + + HOOKID_NFS_AOP_WRITEPAGES_ENTRY, + HOOKID_NFS_AOP_WRITEPAGES_RETURN, + + HOOKID_NFS_AOP_WRITEPAGE_ENTRY, + HOOKID_NFS_AOP_WRITEPAGE_RETURN, + + HOOKID_NFS_AOP_RELEASEPAGE_ENTRY, + HOOKID_NFS_AOP_RELEASEPAGE_RETURN, + + HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY, + HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN, + + HOOKID_NFS_AOP_PREPAREWRITE_ENTRY, + HOOKID_NFS_AOP_PREPAREWRITE_RETURN, + + HOOKID_NFS_AOP_COMMITWRITE_ENTRY, + HOOKID_NFS_AOP_COMMITWRITE_RETURN, + + HOOKID_NFS_PROC_LOOKUP_ENTRY, + HOOKID_NFS_PROC_LOOKUP_RETURN, + + HOOKID_NFS_PROC_READ_ENTRY, + HOOKID_NFS_PROC_READ_RETURN, + + HOOKID_NFS_PROC_WRITE_ENTRY, + HOOKID_NFS_PROC_WRITE_RETURN, + + HOOKID_NFS_PROC_COMMIT_ENTRY, + HOOKID_NFS_PROC_COMMIT_RETURN, + + HOOKID_NFS_PROC_READSETUP_ENTRY, + + HOOKID_NFS_PROC_WRITESETUP_ENTRY, + + HOOKID_NFS_PROC_COMMITSETUP_ENTRY, + + HOOKID_NFS_PROC_READDONE_ENTRY, + HOOKID_NFS_PROC_READDONE_RETURN, + + HOOKID_NFS_PROC_WRITEDONE_ENTRY, + HOOKID_NFS_PROC_WRITEDONE_RETURN, + + HOOKID_NFS_PROC_COMMITDONE_ENTRY, + HOOKID_NFS_PROC_COMMITDONE_RETURN, + + HOOKID_NFS_PROC_OPEN_ENTRY, + HOOKID_NFS_PROC_OPEN_RETURN, + + HOOKID_NFS_PROC_RELEASE_ENTRY, + HOOKID_NFS_PROC_RELEASE_RETURN, + + HOOKID_NFS_PROC_CREATE_ENTRY, + HOOKID_NFS_PROC_CREATE_RETURN, + + HOOKID_NFS_PROC_RENAME_ENTRY, + HOOKID_NFS_PROC_RENAME_RETURN, + + HOOKID_NFS_PROC_REMOVE_ENTRY, + HOOKID_NFS_PROC_REMOVE_RETURN, + + /*NFSD*/ + GROUP_NFSD, + + HOOKID_NFSD_DISPATCH_ENTRY, + HOOKID_NFSD_DISPATCH_RETURN, + + HOOKID_NFSD_OPEN_ENTRY, + HOOKID_NFSD_OPEN_RETURN, + + HOOKID_NFSD_READ_ENTRY, + HOOKID_NFSD_READ_RETURN, + + HOOKID_NFSD_WRITE_ENTRY, + HOOKID_NFSD_WRITE_RETURN, + + HOOKID_NFSD_LOOKUP_ENTRY, + HOOKID_NFSD_LOOKUP_RETURN, + + HOOKID_NFSD_COMMIT_ENTRY, + HOOKID_NFSD_COMMIT_RETURN, + + HOOKID_NFSD_CREATE_ENTRY, + HOOKID_NFSD_CREATE_RETURN, + + HOOKID_NFSD_CREATEV3_ENTRY, + HOOKID_NFSD_CREATEV3_RETURN, + + HOOKID_NFSD_UNLINK_ENTRY, + HOOKID_NFSD_UNLINK_RETURN, + + HOOKID_NFSD_RENAME_ENTRY, + HOOKID_NFSD_RENAME_RETURN, + + HOOKID_NFSD_CLOSE_ENTRY, + HOOKID_NFSD_CLOSE_RETURN, + + HOOKID_NFSD_PROC_LOOKUP_ENTRY, + HOOKID_NFSD_PROC_LOOKUP_RETURN, + + HOOKID_NFSD_PROC_READ_ENTRY, + HOOKID_NFSD_PROC_READ_RETURN, + + HOOKID_NFSD_PROC_WRITE_ENTRY, + HOOKID_NFSD_PROC_WRITE_RETURN, + + HOOKID_NFSD_PROC_COMMIT_ENTRY, + HOOKID_NFSD_PROC_COMMIT_RETURN, + + HOOKID_NFSD_PROC_COMPOUND_ENTRY, + HOOKID_NFSD_PROC_COMPOUND_RETURN, + + HOOKID_NFSD_PROC_REMOVE_ENTRY, + HOOKID_NFSD_PROC_REMOVE_RETURN, + + HOOKID_NFSD_PROC_RENAME_ENTRY, + HOOKID_NFSD_PROC_RENAME_RETURN, + + HOOKID_NFSD_PROC_CREATE_ENTRY, + HOOKID_NFSD_PROC_CREATE_RETURN %{ /* used in embedded c codes */ @@ -153,6 +320,8 @@ int _GROUP_IOSYSCALL = 9; int _GROUP_AIO = 10; int _GROUP_SIGNAL = 11; int _GROUP_CPUFREQ = 15; +int _GROUP_NFS = 16; +int _GROUP_NFSD = 17; /* hookIDs defined inside each group */ int _HOOKID_REGSYSEVT = 1; @@ -261,6 +430,117 @@ int _HOOKID_SIGNAL_FLUSH_ENTRY = 15; int _HOOKID_SWITCH_CPUFREQ = 1; +int _HOOKID_NFS_FOP_LLSEEK_ENTRY= 1; +int _HOOKID_NFS_FOP_LLSEEK_RETURN= 2; +int _HOOKID_NFS_FOP_READ_ENTRY= 3; +int _HOOKID_NFS_FOP_READ_RETURN= 4; +int _HOOKID_NFS_FOP_WRITE_ENTRY= 5; +int _HOOKID_NFS_FOP_WRITE_RETURN= 6; +int _HOOKID_NFS_FOP_AIOREAD_ENTRY= 7; +int _HOOKID_NFS_FOP_AIOREAD_RETURN= 8; +int _HOOKID_NFS_FOP_AIOWRITE_ENTRY= 9; +int _HOOKID_NFS_FOP_AIOWRITE_RETURN= 10; +int _HOOKID_NFS_FOP_MMAP_ENTRY= 11; +int _HOOKID_NFS_FOP_MMAP_RETURN= 12; +int _HOOKID_NFS_FOP_OPEN_ENTRY= 13; +int _HOOKID_NFS_FOP_OPEN_RETURN= 14; +int _HOOKID_NFS_FOP_FLUSH_ENTRY= 15; +int _HOOKID_NFS_FOP_FLUSH_RETURN= 16; +int _HOOKID_NFS_FOP_RELEASE_ENTRY= 17; +int _HOOKID_NFS_FOP_RELEASE_RETURN= 18; +int _HOOKID_NFS_FOP_FSYNC_ENTRY= 19; +int _HOOKID_NFS_FOP_FSYNC_RETURN= 20; +int _HOOKID_NFS_FOP_LOCK_ENTRY= 21; +int _HOOKID_NFS_FOP_LOCK_RETURN= 22; +int _HOOKID_NFS_FOP_SENDFILE_ENTRY= 23; +int _HOOKID_NFS_FOP_SENDFILE_RETURN= 24; +int _HOOKID_NFS_FOP_CHECKFLAGS_ENTRY= 25; +int _HOOKID_NFS_FOP_CHECKFLAGS_RETURN= 26; + +int _HOOKID_NFS_AOP_READPAGE_ENTRY= 27; +int _HOOKID_NFS_AOP_READPAGE_RETURN= 28; +int _HOOKID_NFS_AOP_READPAGES_ENTRY= 29; +int _HOOKID_NFS_AOP_READPAGES_RETURN= 30; +int _HOOKID_NFS_AOP_WRITEPAGE_ENTRY= 31; +int _HOOKID_NFS_AOP_WRITEPAGE_RETURN= 32; +int _HOOKID_NFS_AOP_WRITEPAGES_ENTRY= 33; +int _HOOKID_NFS_AOP_WRITEPAGES_RETURN= 34; +int _HOOKID_NFS_AOP_RELEASEPAGE_ENTRY= 35; +int _HOOKID_NFS_AOP_RELEASEPAGE_RETURN= 36; +int _HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY= 37; +int _HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN= 38; +int _HOOKID_NFS_AOP_PREPAREWRITE_ENTRY= 39; +int _HOOKID_NFS_AOP_PREPAREWRITE_RETURN= 40; +int _HOOKID_NFS_AOP_COMMITWRITE_ENTRY= 41; +int _HOOKID_NFS_AOP_COMMITWRITE_RETURN= 42; + +int _HOOKID_NFS_PROC_LOOKUP_ENTRY = 43; +int _HOOKID_NFS_PROC_LOOKUP_RETURN= 44; +int _HOOKID_NFS_PROC_READ_ENTRY= 45; +int _HOOKID_NFS_PROC_READ_RETURN= 46; +int _HOOKID_NFS_PROC_WRITE_ENTRY= 47; +int _HOOKID_NFS_PROC_WRITE_RETURN= 48; +int _HOOKID_NFS_PROC_COMMIT_ENTRY= 49; +int _HOOKID_NFS_PROC_COMMIT_RETURN= 50; +int _HOOKID_NFS_PROC_READSETUP_ENTRY= 51; +int _HOOKID_NFS_PROC_WRITESETUP_ENTRY= 52; +int _HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 53; +int _HOOKID_NFS_PROC_READDONE_ENTRY= 54; +int _HOOKID_NFS_PROC_READDONE_RETURN= 55; +int _HOOKID_NFS_PROC_WRITEDONE_ENTRY= 56; +int _HOOKID_NFS_PROC_WRITEDONE_RETURN= 57; +int _HOOKID_NFS_PROC_COMMITDONE_ENTRY= 58; +int _HOOKID_NFS_PROC_COMMITDONE_RETURN= 59; +int _HOOKID_NFS_PROC_OPEN_ENTRY= 60; +int _HOOKID_NFS_PROC_OPEN_RETURN= 61; +int _HOOKID_NFS_PROC_RELEASE_ENTRY= 62; +int _HOOKID_NFS_PROC_RELEASE_RETURN= 63; +int _HOOKID_NFS_PROC_CREATE_ENTRY= 64; +int _HOOKID_NFS_PROC_CREATE_RETURN= 65; +int _HOOKID_NFS_PROC_RENAME_ENTRY= 66; +int _HOOKID_NFS_PROC_RENAME_RETURN= 67; +int _HOOKID_NFS_PROC_REMOVE_ENTRY= 68; +int _HOOKID_NFS_PROC_REMOVE_RETURN= 69; + +int _HOOKID_NFSD_DISPATCH_ENTRY= 1; +int _HOOKID_NFSD_DISPATCH_RETURN= 2; +int _HOOKID_NFSD_OPEN_ENTRY= 3; +int _HOOKID_NFSD_OPEN_RETURN= 4; +int _HOOKID_NFSD_READ_ENTRY= 5; +int _HOOKID_NFSD_READ_RETURN= 6; +int _HOOKID_NFSD_WRITE_ENTRY= 7; +int _HOOKID_NFSD_WRITE_RETURN= 8; +int _HOOKID_NFSD_LOOKUP_ENTRY= 9; +int _HOOKID_NFSD_LOOKUP_RETURN= 10; +int _HOOKID_NFSD_COMMIT_ENTRY= 11; +int _HOOKID_NFSD_COMMIT_RETURN= 12; +int _HOOKID_NFSD_CREATE_ENTRY= 13; +int _HOOKID_NFSD_CREATE_RETURN= 14; +int _HOOKID_NFSD_CREATEV3_ENTRY= 15; +int _HOOKID_NFSD_CREATEV3_RETURN= 16; +int _HOOKID_NFSD_UNLINK_ENTRY= 17; +int _HOOKID_NFSD_UNLINK_RETURN= 18; +int _HOOKID_NFSD_RENAME_ENTRY= 19; +int _HOOKID_NFSD_RENAME_RETURN= 20; +int _HOOKID_NFSD_CLOSE_ENTRY= 21; +int _HOOKID_NFSD_CLOSE_RETURN = 22; +int _HOOKID_NFSD_PROC_LOOKUP_ENTRY = 23; +int _HOOKID_NFSD_PROC_LOOKUP_RETURN= 24; +int _HOOKID_NFSD_PROC_READ_ENTRY= 25; +int _HOOKID_NFSD_PROC_READ_RETURN= 26; +int _HOOKID_NFSD_PROC_WRITE_ENTRY= 27; +int _HOOKID_NFSD_PROC_WRITE_RETURN= 28; +int _HOOKID_NFSD_PROC_COMMIT_ENTRY= 29; +int _HOOKID_NFSD_PROC_COMMIT_RETURN= 30; +int _HOOKID_NFSD_PROC_COMPOUND_ENTRY= 31; +int _HOOKID_NFSD_PROC_COMPOUND_RETURN= 32; +int _HOOKID_NFSD_PROC_REMOVE_ENTRY= 33; +int _HOOKID_NFSD_PROC_REMOVE_RETURN= 34; +int _HOOKID_NFSD_PROC_RENAME_ENTRY= 35; +int _HOOKID_NFSD_PROC_RENAME_RETURN= 36; +int _HOOKID_NFSD_PROC_CREATE_ENTRY= 37; +int _HOOKID_NFSD_PROC_CREATE_RETURN= 38; + %} function hookid_init() @@ -391,6 +671,123 @@ function hookid_init() GROUP_CPUFREQ = 15 HOOKID_SWITCH_CPUFREQ = 2 + + GROUP_NFS = 16 + + HOOKID_NFS_FOP_LLSEEK_ENTRY= 1 + HOOKID_NFS_FOP_LLSEEK_RETURN= 2 + HOOKID_NFS_FOP_READ_ENTRY= 3 + HOOKID_NFS_FOP_READ_RETURN= 4 + HOOKID_NFS_FOP_WRITE_ENTRY= 5 + HOOKID_NFS_FOP_WRITE_RETURN= 6 + HOOKID_NFS_FOP_AIOREAD_ENTRY= 7 + HOOKID_NFS_FOP_AIOREAD_RETURN= 8 + HOOKID_NFS_FOP_AIOWRITE_ENTRY= 9 + HOOKID_NFS_FOP_AIOWRITE_RETURN= 10 + HOOKID_NFS_FOP_MMAP_ENTRY= 11 + HOOKID_NFS_FOP_MMAP_RETURN= 12 + HOOKID_NFS_FOP_OPEN_ENTRY= 13 + HOOKID_NFS_FOP_OPEN_RETURN= 14 + HOOKID_NFS_FOP_FLUSH_ENTRY= 15 + HOOKID_NFS_FOP_FLUSH_RETURN= 16 + HOOKID_NFS_FOP_RELEASE_ENTRY= 17 + HOOKID_NFS_FOP_RELEASE_RETURN= 18 + HOOKID_NFS_FOP_FSYNC_ENTRY= 19 + HOOKID_NFS_FOP_FSYNC_RETURN= 20 + HOOKID_NFS_FOP_LOCK_ENTRY= 21 + HOOKID_NFS_FOP_LOCK_RETURN= 22 + HOOKID_NFS_FOP_SENDFILE_ENTRY= 23 + HOOKID_NFS_FOP_SENDFILE_RETURN= 24 + HOOKID_NFS_FOP_CHECKFLAGS_ENTRY= 25 + HOOKID_NFS_FOP_CHECKFLAGS_RETURN= 26 + + HOOKID_NFS_AOP_READPAGE_ENTRY= 27 + HOOKID_NFS_AOP_READPAGE_RETURN= 28 + HOOKID_NFS_AOP_READPAGES_ENTRY= 29 + HOOKID_NFS_AOP_READPAGES_RETURN= 30 + HOOKID_NFS_AOP_WRITEPAGE_ENTRY= 31 + HOOKID_NFS_AOP_WRITEPAGE_RETURN= 32 + HOOKID_NFS_AOP_WRITEPAGES_ENTRY= 33 + HOOKID_NFS_AOP_WRITEPAGES_RETURN= 34 + HOOKID_NFS_AOP_RELEASEPAGE_ENTRY= 35 + HOOKID_NFS_AOP_RELEASEPAGE_RETURN= 36 + HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY= 37 + HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN= 38 + HOOKID_NFS_AOP_PREPAREWRITE_ENTRY= 39 + HOOKID_NFS_AOP_PREPAREWRITE_RETURN= 40 + HOOKID_NFS_AOP_COMMITWRITE_ENTRY= 41 + HOOKID_NFS_AOP_COMMITWRITE_RETURN= 42 + + HOOKID_NFS_PROC_LOOKUP_ENTRY = 43 + HOOKID_NFS_PROC_LOOKUP_RETURN= 44 + HOOKID_NFS_PROC_READ_ENTRY= 45 + HOOKID_NFS_PROC_READ_RETURN= 46 + HOOKID_NFS_PROC_WRITE_ENTRY= 47 + HOOKID_NFS_PROC_WRITE_RETURN= 48 + HOOKID_NFS_PROC_COMMIT_ENTRY= 49 + HOOKID_NFS_PROC_COMMIT_RETURN= 50 + HOOKID_NFS_PROC_READSETUP_ENTRY= 51 + HOOKID_NFS_PROC_WRITESETUP_ENTRY= 52 + HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 53 + HOOKID_NFS_PROC_READDONE_ENTRY= 54 + HOOKID_NFS_PROC_READDONE_RETURN= 55 + HOOKID_NFS_PROC_WRITEDONE_ENTRY= 56 + HOOKID_NFS_PROC_WRITEDONE_RETURN= 57 + HOOKID_NFS_PROC_COMMITDONE_ENTRY= 58 + HOOKID_NFS_PROC_COMMITDONE_RETURN= 59 + HOOKID_NFS_PROC_OPEN_ENTRY= 60 + HOOKID_NFS_PROC_OPEN_RETURN= 61 + HOOKID_NFS_PROC_RELEASE_ENTRY= 62 + HOOKID_NFS_PROC_RELEASE_RETURN= 63 + HOOKID_NFS_PROC_CREATE_ENTRY= 64 + HOOKID_NFS_PROC_CREATE_RETURN= 65 + HOOKID_NFS_PROC_RENAME_ENTRY= 66 + HOOKID_NFS_PROC_RENAME_RETURN= 67 + HOOKID_NFS_PROC_REMOVE_ENTRY= 68 + HOOKID_NFS_PROC_REMOVE_RETURN= 69 + + GROUP_NFSD = 17 + + HOOKID_NFSD_DISPATCH_ENTRY= 1 + HOOKID_NFSD_DISPATCH_RETURN= 2 + HOOKID_NFSD_OPEN_ENTRY= 3 + HOOKID_NFSD_OPEN_RETURN= 4 + HOOKID_NFSD_READ_ENTRY= 5 + HOOKID_NFSD_READ_RETURN= 6 + HOOKID_NFSD_WRITE_ENTRY= 7 + HOOKID_NFSD_WRITE_RETURN= 8 + HOOKID_NFSD_LOOKUP_ENTRY= 9 + HOOKID_NFSD_LOOKUP_RETURN= 10 + HOOKID_NFSD_COMMIT_ENTRY= 11 + HOOKID_NFSD_COMMIT_RETURN= 12 + HOOKID_NFSD_CREATE_ENTRY= 13 + HOOKID_NFSD_CREATE_RETURN= 14 + HOOKID_NFSD_CREATEV3_ENTRY= 15 + HOOKID_NFSD_CREATEV3_RETURN= 16 + HOOKID_NFSD_UNLINK_ENTRY= 17 + HOOKID_NFSD_UNLINK_RETURN= 18 + HOOKID_NFSD_RENAME_ENTRY= 19 + HOOKID_NFSD_RENAME_RETURN= 20 + HOOKID_NFSD_CLOSE_ENTRY= 21 + HOOKID_NFSD_CLOSE_RETURN = 22 + + HOOKID_NFSD_PROC_LOOKUP_ENTRY = 23 + HOOKID_NFSD_PROC_LOOKUP_RETURN= 24 + HOOKID_NFSD_PROC_READ_ENTRY= 25 + HOOKID_NFSD_PROC_READ_RETURN= 26 + HOOKID_NFSD_PROC_WRITE_ENTRY= 27 + HOOKID_NFSD_PROC_WRITE_RETURN= 28 + HOOKID_NFSD_PROC_COMMIT_ENTRY= 29 + HOOKID_NFSD_PROC_COMMIT_RETURN= 30 + HOOKID_NFSD_PROC_COMPOUND_ENTRY= 31 + HOOKID_NFSD_PROC_COMPOUND_RETURN= 32 + HOOKID_NFSD_PROC_REMOVE_ENTRY= 33 + HOOKID_NFSD_PROC_REMOVE_RETURN= 34 + HOOKID_NFSD_PROC_RENAME_ENTRY= 35 + HOOKID_NFSD_PROC_RENAME_RETURN= 36 + HOOKID_NFSD_PROC_CREATE_ENTRY= 37 + HOOKID_NFSD_PROC_CREATE_RETURN= 38 + } @@ -403,7 +800,6 @@ probe begin write_events_desc() process_snapshot() } - probe end { lket_kill_time() |